L3 Network Engineer - Aruba ClearPass NAC

• 8-12+ years of networking or security infrastructure experience, including at least 5 years of NAC or identity-services experience.
• Strong hands-on experience with Aruba ClearPass Policy Manager administration and complex authentication troubleshooting.
• Deep knowledge of 802.1X, RADIUS, TACACS+, EAP methods, certificates, PKI, Active Directory, LDAP, endpoint profiling, and authorization.
• Experience with large-scale wired and wireless NAC environments, high availability, upgrades, and security integrations.
• Working knowledge of routing, switching, wireless, firewalls, DHCP, DNS, APIs, automation, and ITIL processes.

ResponsibilitiesAruba ClearPass NAC - Primary

• Administer and troubleshoot Aruba ClearPass Policy Manager clusters, nodes, services, policies, roles, enforcement profiles, and network device definitions.
• Configure and troubleshoot 802.1X, MAC Authentication Bypass, RADIUS, TACACS+, EAP-TLS, PEAP, certificate-based authentication, and authorization flows.
• Manage endpoint profiling, posture, device categories, custom fingerprints, role mapping, segmentation, and access enforcement.
• Support ClearPass Guest, Onboard, OnGuard, captive portal, BYOD, sponsor workflows, and certificate lifecycle processes where deployed.
• Integrate ClearPass with Active Directory, LDAP, PKI, MDM/UEM, SIEM, firewalls, wireless controllers, switches, and ITSM platforms.
• Troubleshoot authentication failures using Access Tracker, event viewer, RADIUS attributes, endpoint data, certificates, packet captures, and device logs.
• Plan and execute upgrades, patches, cluster maintenance, backups, restores, migrations, certificate renewals, and disaster-recovery tests.
• Develop standards, reusable policy designs, APIs, automation, reporting, audit controls, and operational documentation.

Operations, Governance & Technical Leadership

• Own or support P1/P2 major incidents, participate in technical bridge calls, and provide timely stakeholder updates.
• Execute incident, service request, change, problem, and configuration management activities in line with ITIL practices.
• Prepare implementation plans, rollback procedures, risk assessments, validation reports, SOPs, and knowledge articles.
• Engage OEM support and technology vendors for complex defects, software issues, and product escalations.
• Monitor service health, capacity, availability, performance, and recurring trends; recommend continuous improvement actions.
• Mentor L1/L2 engineers, conduct technical reviews, and support transitions, audits, projects, and operational readiness.

Qualifications

Technology Area

Preferred Platforms

Expected Capability

Wireless

Aruba, Juniper Mist, Cisco

Troubleshoot WLAN authentication, role assignment, guest access, roaming, and controller or cloud integration.

LAN Switching

Aruba CX, Juniper EX, Cisco Catalyst

Support wired 802.1X, MAB, downloadable roles/ACLs, VLAN assignment, and switch-port behavior.

Identity / PKI

Active Directory, LDAP, CA, certificates

Troubleshoot directory lookup, group mapping, EAP certificates, trust chains, revocation, and renewal.

Security Integration

Palo Alto, firewalls, SIEM

Support context sharing, segmentation, security events, syslog, and enforcement integrations.

DDI

BlueCat, Infoblox, Microsoft

Understand DHCP, DNS, IP addressing, endpoint visibility, and profiling dependencies.

Automation

ClearPass APIs, Python, Ansible

• Automate device onboarding, policy validation, reporting, backups, and operational workflows.